@nockdev/awf 6.2.0 → 6.2.1

package/.agent/skills/devops/gcp/data/data-services.yaml

@@ -0,0 +1,97 @@
+# GCP Data Services — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-DAT-001
+    name: Firestore
+    category: database
+    description: |
+      NoSQL document database with real-time sync.
+    example: |
+      import { getFirestore, collection, doc, setDoc, getDocs, query, where } from "firebase/firestore";
+
+      const db = getFirestore();
+
+      // Create/Update
+      await setDoc(doc(db, "users", "alice"), {
+        name: "Alice", email: "alice@example.com", createdAt: new Date()
+      });
+
+      // Query
+      const q = query(collection(db, "users"), where("name", "==", "Alice"));
+      const snapshot = await getDocs(q);
+      snapshot.forEach(doc => console.log(doc.data()));
+
+  - id: GCP-DAT-002
+    name: BigQuery
+    category: analytics
+    description: |
+      Serverless data warehouse for analytics.
+    example: |
+      // Node.js client
+      import { BigQuery } from "@google-cloud/bigquery";
+      const bq = new BigQuery();
+
+      const [rows] = await bq.query({
+        query: "SELECT name, COUNT(*) as count FROM `project.dataset.events` GROUP BY name ORDER BY count DESC LIMIT 10",
+        location: "US"
+      });
+
+  - id: GCP-DAT-003
+    name: Cloud Storage
+    category: storage
+    description: |
+      Object storage for files and media.
+    example: |
+      import { Storage } from "@google-cloud/storage";
+      const storage = new Storage();
+      const bucket = storage.bucket("my-bucket");
+
+      // Upload
+      await bucket.upload("local-file.pdf", { destination: "uploads/file.pdf" });
+
+      // Download
+      await bucket.file("uploads/file.pdf").download({ destination: "downloaded.pdf" });
+
+      // Signed URL (temporary access)
+      const [url] = await bucket.file("uploads/file.pdf")
+        .getSignedUrl({ action: "read", expires: Date.now() + 3600000 });
+
+  - id: GCP-DAT-004
+    name: Pub/Sub
+    category: messaging
+    description: |
+      Asynchronous messaging service.
+    example: |
+      import { PubSub } from "@google-cloud/pubsub";
+      const pubsub = new PubSub();
+
+      // Publish
+      const topic = pubsub.topic("orders");
+      await topic.publishMessage({ json: { orderId: "123", amount: 99.99 } });
+
+      // Subscribe
+      const subscription = pubsub.subscription("orders-worker");
+      subscription.on("message", (msg) => {
+        const order = JSON.parse(msg.data.toString());
+        processOrder(order);
+        msg.ack();
+      });
+
+  - id: GCP-DAT-005
+    name: IAM Best Practices
+    category: security
+    description: |
+      GCP IAM configuration.
+    text: |
+      Principles:
+      - Use service accounts (not user accounts) for services
+      - Least privilege: minimal roles per service
+      - Workload Identity for GKE → no key files
+      - Short-lived credentials (1h max)
+
+      Common roles:
+      roles/run.invoker — Invoke Cloud Run
+      roles/cloudfunctions.invoker — Invoke Functions
+      roles/storage.objectViewer — Read GCS objects
+      roles/bigquery.dataViewer — Read BigQuery

package/.agent/skills/devops/kubernetes/META.yaml

@@ -1,15 +1,64 @@
-name: kubernetes
-version: "6.2.0"
-category: devops
-tier: 1
+name: kubernetes
+version: "6.2.1"
+category: infrastructure
+tier: 3
 
-desc: "Container orchestration platform patterns for Kubernetes 1.30/1.31. Covers deployments, services, Helm 3, ArgoCD GitOps, scaling, security."
+desc: "Kubernetes orchestration patterns for K8s 1.32-1.33+. Covers Gateway API, Sidecar Containers, Kueue, Pod Security."
+
+patterns:
+  total: 20
+  domains:
+    networking: 5
+    workloads: 5
+    security: 5
+    scheduling: 5
+
+    - "*.yaml"
+    - "*.yml"
+    - "Chart.yaml"
+    - "kustomization.yaml"
+    - "values.yaml"
+  keywords:
+    # Core
+    - kubernetes
+    - k8s
+    - kubectl
+    - helm
+    - kustomize
+    # Workloads
+    - deployment
+    - statefulset
+    - daemonset
+    - job
+    - cronjob
+    # Networking
+    - service
+    - ingress
+    - gateway api
+    - gateway
+    - httproute
+    # Security
+    - pod security
+    - rbac
+    - service account
+    - network policy
+    # Scheduling
+    - node selector
+    - affinity
+    - kueue
+    - priority class
+  intents:
+    - deploy kubernetes
+    - create deployment
+    - configure ingress
+    - setup k8s
 
 related_skills:
   - docker
   - aws
   - ci-cd
+  - security
 
 prevent_confusion_with:
-  - docker: "K8s orchestrates containers, Docker builds them"
-  - aws-serverless: "K8s for container orchestration, not Lambda"
+  - docker: "kubernetes orchestrates containers, docker builds them"
+  - aws: "kubernetes is general, aws covers EKS specifically"

package/.agent/skills/devops/terraform/META.yaml

@@ -0,0 +1,47 @@
+name: terraform
+version: "1.0.0"
+display: Terraform IaC
+category: devops
+tier: 1
+priority: 5
+
+desc: "Terraform Infrastructure as Code. HCL syntax, module design, state management, multi-cloud providers, and CI/CD pipeline patterns."
+
+triggers:
+  file_patterns:
+    - "*.tf"
+    - "*.tfvars"
+    - "terraform.tfstate"
+    - ".terraform/**"
+    - "terraform.lock.hcl"
+  keywords:
+    - terraform
+    - IaC
+    - infrastructure as code
+    - HCL
+    - tfstate
+    - terraform plan
+    - terraform apply
+    - terraform module
+    - terraform provider
+
+caps:
+  - HCL syntax & best practices
+  - Module design (reusable, versioned)
+  - State management (remote backend, locking)
+  - Provider ecosystem (AWS, GCP, Azure)
+  - Workspace management (dev/staging/prod)
+  - Import & migration strategies
+  - CI/CD integration (plan → approve → apply)
+
+related_skills:
+  - aws
+  - gcp
+  - azure
+  - docker
+  - kubernetes
+
+hsa_adapter:
+  enabled: true
+  data_dir: "skills/devops/terraform/data"
+  preload_data: false

package/.agent/skills/devops/terraform/SKILL.md

@@ -0,0 +1,73 @@
+# Terraform IaC
+
+> HCL • Modules • Remote State • Multi-cloud
+
+---
+
+## Khi Nào Dùng
+
+- Quản lý infrastructure bằng code
+- Multi-cloud provisioning (AWS, GCP, Azure)
+- Reproducible environments (dev/staging/prod)
+
+## Core Patterns
+
+### Module Design
+
+```hcl
+# modules/vpc/main.tf
+variable "cidr_block" { type = string }
+resource "aws_vpc" "main" { cidr_block = var.cidr_block }
+output "vpc_id" { value = aws_vpc.main.id }
+
+# Usage
+module "vpc" {
+  source     = "./modules/vpc"
+  cidr_block = "10.0.0.0/16"
+}
+```
+
+### Remote State
+
+```hcl
+terraform {
+  backend "s3" {
+    bucket         = "my-terraform-state"
+    key            = "prod/terraform.tfstate"
+    region         = "us-east-1"
+    dynamodb_table = "terraform-locks"
+    encrypt        = true
+  }
+}
+```
+
+### Workspace Strategy
+
+```bash
+terraform workspace new staging
+terraform workspace select prod
+terraform plan -var-file=envs/prod.tfvars
+```
+
+## CI/CD Pipeline
+
+```
+1. terraform fmt -check     # Format check
+2. terraform validate       # Syntax validation
+3. terraform plan -out=plan # Preview changes
+4. APPROVAL GATE            # Manual approval
+5. terraform apply plan     # Apply approved plan
+```
+
+## Common Traps
+
+| Trap              | Fix                                       |
+| ----------------- | ----------------------------------------- |
+| State conflicts   | Remote backend + DynamoDB locking         |
+| Drift detection   | Regular `terraform plan` in CI            |
+| Secret exposure   | Use `sensitive = true`, vault integration |
+| Large state files | Split into modules, use workspaces        |
+
+---
+
+_DOMYH Awesome Code • Terraform Skill v1.0.0_

package/.agent/skills/devops/terraform/data/ci-cd.yaml

@@ -0,0 +1,89 @@
+# Terraform CI/CD Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: TF-CI-001
+    name: GitHub Actions Pipeline
+    category: ci-cd
+    description: |
+      Terraform CI/CD with GitHub Actions.
+    example: |
+      # .github/workflows/terraform.yml
+      name: Terraform
+      on:
+        pull_request:
+          paths: ["infra/**"]
+        push:
+          branches: [main]
+          paths: ["infra/**"]
+
+      jobs:
+        plan:
+          runs-on: ubuntu-latest
+          if: github.event_name == 'pull_request'
+          steps:
+            - uses: actions/checkout@v4
+            - uses: hashicorp/setup-terraform@v3
+            - run: terraform init
+            - run: terraform plan -no-color -out=plan.tfplan
+            - uses: actions/github-script@v7
+              with:
+                script: |
+                  github.rest.issues.createComment({
+                    issue_number: context.issue.number,
+                    body: '```\n' + '${{ steps.plan.outputs.stdout }}' + '\n```'
+                  })
+        
+        apply:
+          runs-on: ubuntu-latest
+          if: github.ref == 'refs/heads/main'
+          steps:
+            - uses: actions/checkout@v4
+            - uses: hashicorp/setup-terraform@v3
+            - run: terraform init
+            - run: terraform apply -auto-approve
+
+  - id: TF-CI-002
+    name: Pre-commit Hooks
+    category: quality
+    description: |
+      Quality checks before commit.
+    text: |
+      Tools:
+      - terraform fmt: Format HCL files
+      - terraform validate: Syntax validation
+      - tflint: Linting rules
+      - tfsec/trivy: Security scanning
+      - terraform-docs: Auto-generate docs
+    example: |
+      # .pre-commit-config.yaml
+      repos:
+        - repo: https://github.com/antonbabenko/pre-commit-terraform
+          hooks:
+            - id: terraform_fmt
+            - id: terraform_validate
+            - id: terraform_tflint
+            - id: terraform_trivy
+            - id: terraform_docs
+
+  - id: TF-CI-003
+    name: State Locking
+    category: safety
+    description: |
+      Prevent concurrent state modifications.
+    text: |
+      AWS: DynamoDB table for lock
+      GCP: GCS bucket with locking
+      Azure: Blob storage with lease
+
+      Always enable locking in CI/CD to prevent race conditions.
+
+  - id: TF-CI-004
+    name: Drift Detection
+    category: monitoring
+    description: |
+      Detect infrastructure drift from desired state.
+    text: |
+      Schedule: terraform plan in CI (daily/weekly)
+      Alert on: plan shows changes not in code
+      Tools: Spacelift, env0, Terraform Cloud

package/.agent/skills/devops/terraform/data/hcl-patterns.yaml

@@ -0,0 +1,131 @@
+# Terraform HCL Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: TF-HCL-001
+    name: Module Structure
+    category: architecture
+    description: |
+      Standard module structure.
+    text: |
+      module/
+      ├── main.tf       — Primary resources
+      ├── variables.tf  — Input variables
+      ├── outputs.tf    — Output values
+      ├── versions.tf   — Provider + Terraform version constraints
+      ├── locals.tf     — Local values
+      ├── data.tf       — Data sources
+      └── README.md     — Module documentation
+
+  - id: TF-HCL-002
+    name: Variable Patterns
+    category: config
+    description: |
+      Input variables with validation.
+    example: |
+      variable "environment" {
+        description = "Deployment environment"
+        type        = string
+        validation {
+          condition     = contains(["dev", "staging", "prod"], var.environment)
+          error_message = "Environment must be dev, staging, or prod."
+        }
+      }
+
+      variable "instance_config" {
+        description = "EC2 instance configuration"
+        type = object({
+          instance_type = string
+          ami_id        = string
+          disk_size_gb  = optional(number, 20)
+        })
+      }
+
+  - id: TF-HCL-003
+    name: Remote State
+    category: state
+    description: |
+      Store state remotely for team collaboration.
+    example: |
+      terraform {
+        backend "s3" {
+          bucket         = "my-terraform-state"
+          key            = "prod/terraform.tfstate"
+          region         = "us-east-1"
+          dynamodb_table = "terraform-locks"
+          encrypt        = true
+        }
+      }
+
+      # Reference remote state from another project
+      data "terraform_remote_state" "network" {
+        backend = "s3"
+        config = {
+          bucket = "my-terraform-state"
+          key    = "network/terraform.tfstate"
+          region = "us-east-1"
+        }
+      }
+
+  - id: TF-HCL-004
+    name: for_each and count
+    category: config
+    description: |
+      Create multiple resources dynamically.
+    example: |
+      # for_each with map (preferred)
+      variable "subnets" {
+        type = map(object({ cidr = string, az = string }))
+      }
+
+      resource "aws_subnet" "this" {
+        for_each          = var.subnets
+        vpc_id            = aws_vpc.main.id
+        cidr_block        = each.value.cidr
+        availability_zone = each.value.az
+        tags = { Name = "subnet-${each.key}" }
+      }
+
+  - id: TF-HCL-005
+    name: Dynamic Blocks
+    category: config
+    description: |
+      Generate nested blocks dynamically.
+    example: |
+      resource "aws_security_group" "this" {
+        name = "web-sg"
+        
+        dynamic "ingress" {
+          for_each = var.ingress_rules
+          content {
+            from_port   = ingress.value.port
+            to_port     = ingress.value.port
+            protocol    = "tcp"
+            cidr_blocks = ingress.value.cidrs
+          }
+        }
+      }
+
+  - id: TF-HCL-006
+    name: Moved Block (Refactoring)
+    category: refactoring
+    description: |
+      Rename resources without recreating them.
+    example: |
+      moved {
+        from = aws_instance.web
+        to   = aws_instance.app_server
+      }
+
+  - id: TF-HCL-007
+    name: Import Block
+    category: migration
+    description: |
+      Import existing infrastructure into Terraform.
+    example: |
+      import {
+        to = aws_instance.web
+        id = "i-1234567890abcdef0"
+      }
+
+      # Generate config: terraform plan -generate-config-out=generated.tf

package/.agent/skills/devops/terraform/data/providers.yaml

@@ -0,0 +1,96 @@
+# Terraform Provider Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: TF-PROV-001
+    name: AWS Provider
+    category: aws
+    description: Common AWS resource patterns.
+    example: |
+      terraform {
+        required_providers {
+          aws = { source = "hashicorp/aws", version = "~> 5.0" }
+        }
+      }
+
+      provider "aws" {
+        region = var.aws_region
+        default_tags {
+          tags = { Environment = var.environment, ManagedBy = "terraform" }
+        }
+      }
+
+      # VPC + Subnets
+      module "vpc" {
+        source  = "terraform-aws-modules/vpc/aws"
+        version = "~> 5.0"
+        name    = "${var.project}-vpc"
+        cidr    = "10.0.0.0/16"
+        azs             = ["us-east-1a", "us-east-1b"]
+        private_subnets = ["10.0.1.0/24", "10.0.2.0/24"]
+        public_subnets  = ["10.0.101.0/24", "10.0.102.0/24"]
+        enable_nat_gateway = true
+      }
+
+  - id: TF-PROV-002
+    name: GCP Provider
+    category: gcp
+    description: Common GCP resource patterns.
+    example: |
+      provider "google" {
+        project = var.project_id
+        region  = var.region
+      }
+
+      resource "google_cloud_run_v2_service" "api" {
+        name     = "api-service"
+        location = var.region
+        template {
+          containers {
+            image = "gcr.io/${var.project_id}/api:latest"
+            resources {
+              limits = { cpu = "1", memory = "512Mi" }
+            }
+          }
+        }
+      }
+
+  - id: TF-PROV-003
+    name: Azure Provider
+    category: azure
+    description: Common Azure resource patterns.
+    example: |
+      provider "azurerm" {
+        features {}
+        subscription_id = var.subscription_id
+      }
+
+      resource "azurerm_resource_group" "main" {
+        name     = "rg-${var.project}-${var.environment}"
+        location = var.location
+      }
+
+  - id: TF-PROV-004
+    name: Multi-cloud Pattern
+    category: multi-cloud
+    description: |
+      Use multiple providers in same configuration.
+    text: |
+      Use aliases for multi-region/multi-account:
+      provider "aws" { alias = "us-east" region = "us-east-1" }
+      provider "aws" { alias = "eu-west" region = "eu-west-1" }
+
+      resource "aws_s3_bucket" "eu" { provider = aws.eu-west }
+
+  - id: TF-PROV-005
+    name: Workspaces
+    category: environments
+    description: |
+      Manage multiple environments with workspaces.
+    text: |
+      terraform workspace new staging
+      terraform workspace new production
+      terraform workspace select staging
+
+      Use terraform.workspace in configs:
+      locals { env = terraform.workspace }

package/.agent/skills/frameworks/angular/META.yaml

@@ -1,10 +1,25 @@
-name: angular
-version: "6.2.0"
+name: angular
+version: "6.2.1"
+display: "Angular Patterns"
 category: frontend
-tier: 3
+tier: 1
+priority: 3
 
 desc: "Angular 20.2/21/22 development patterns (2025-2026). Signals-first, standalone, zoneless-stable."
 
+caps:
+  - signals-system
+  - standalone-components
+  - zoneless-change-detection
+  - incremental-hydration
+  - ssr-hydration
+  - dependency-injection
+
+data_files:
+  - data/core.yaml
+  - data/server.yaml
+  - data/performance.yaml
+
 patterns:
   total: 15
   domains:
@@ -12,9 +27,8 @@ patterns:
     server: 4
     performance: 5
 
-hsa:
-  enabled: true
-  adapter: angular_adapter.py
+    - search_angular_patterns
+    - get_angular_component
 
 triggers:
   file_patterns:

package/.agent/skills/frameworks/angular/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: angular
 detect: ["angular.json", "*.component.ts", "@angular/core"]
-version: "6.1.2"
+version: "6.2.1"
 category: frontend
 tier: 1
 ---

package/.agent/skills/frameworks/flutter/META.yaml

@@ -1,10 +1,25 @@
-name: flutter
-version: "6.2.0"
+name: flutter
+version: "6.2.1"
+display: "Flutter & Dart Patterns"
 category: mobile
-tier: 3
+tier: 1
+priority: 3
 
 desc: "Flutter 3.29+ & Dart 3.7+ development patterns (2025-2026). Impeller default, main thread Dart, Material 3."
 
+caps:
+  - widget-system
+  - state-management
+  - platform-integration
+  - impeller-rendering
+  - dart-patterns
+  - material-design-3
+
+data_files:
+  - data/core.yaml
+  - data/state.yaml
+  - data/platform.yaml
+
 patterns:
   total: 16
   domains:
@@ -12,9 +27,8 @@ patterns:
     state: 4
     platform: 6
 
-hsa:
-  enabled: true
-  adapter: flutter_adapter.py
+    - search_flutter_patterns
+    - get_flutter_widget
 
 triggers:
   file_patterns: